LoginSecurity

LoginSecurity
LoginSecurity is a lightweight password authorization plugin. You can optionally set a password each time you enter the server, adding a double layer of security to your account. The password is stored inside the configuration file, nobody else except the server owner can access or modify it.
How does it work?
Install the pluign to your /plugins/ directory, then start your server.
Type /register <password>, your account is now locked with a password.
For each time you login, make sure to use /login <password>.
Features
- Register your account optional or required (change in config)
- 5 Useful commands to mangage your password
- Advanced administrative control
- Advanced documentation via wiki
- Secure password storage using BCrypt
- Secure sessions storing to improve user experience
- Customizable time-out
- Map captcha upon registration (user friendly)
- Conversion from AuthMe and xAuth (check wiki for more info)
- Premium support through AutoIn
- Automatic update with changelog overview
- Username filtering (length and characters)
- Highly detailed configuration
- Automatically updated translation manager (user-submitted)
- Prevents being kicked by orther players loging in with your name
Session login allows the user to log in right after they logged out and not have to type in their password again. (1 minute time limit of being logged out, stores IP during that time to keep everything safe)
Commands
/lac - Admin command, rmpass and reload
/register <password> - Set your password
/login <password> - Login with your password
/changepass <old> <new> - change your password
/logout - Logout
Permissions
- loginsecurity.admin - allows admin command
- loginsecurity.update - shows update notifications
Video
Thanks to ServerMiner for making this informative tutorial
Orther tutorials: German (by MineCraftler4Live)
Planned
- Add translation interface for easier language selection
- Suggestions?
Known Bugs
- Players can mount/dismount and ride on vehicles while not logged in
Disclaimer
By default, LoginSecurity will check for updates from bukkitdev every 3 hours.
This feature can be disabled by setting "update-checker" to "false"
Anyone with the permission node ls.admin will be notified of updates, and it also able to download them via /lac update.
Which again can be disabled by disabling the update-checker
This plugin utilises Hidendra's plugin metrics system, which means that the following information is collected and sent to mcstats.org:
- A unique identifier
- The server's version of Java
- Whether the server is in offline or online mode
- The plugin's version
- The server's version
- The OS version/name and architecture
- The core count for the CPU
- The number of players online
The Metrics version Opting out of this service can be done by editing plugins/Plugin Metrics/config.yml and changing opt-out to true.
Additionally, when the language setting is changed, information is retrieved from lang.lenis0012.com to aquire up to date translations.
Links
- v3.0.2 - Download (18 - 1.15)
- Source code (GitHub)
- https://github.com/lenis0012/LoginSecurity-2/wiki (Wiki)
- https://github.com/lenis0012/Translations/wiki/Contribute (Translation Contribution)
Donate
If you want to support me working on this project, please donate.
It helps me alot to keep my projects up.
Donate at the top right corner
-
View User Profile
-
Send Message
Posted Feb 10, 2014I noticed a slight bug, Not hard to work around.
On my server I require passwords. When I get a user I want to remove his password so he is forced to reregister. I use /lac rmpass <user>
it works as expected except if they are online.
In the case of Passwords required. have /lac rmpass kick the user before removing password.
-
View User Profile
-
Send Message
Posted Feb 1, 2014For some reason the extended time is not persisting when I log in under the given session timeout?
-
View User Profile
-
Send Message
Posted Jan 31, 2014One suggestion: Requiring legitimate usernames (not "cool guy" but "coolguy") I have had problems with people logging in with illegal names, and they are hard to deal with.
-
View User Profile
-
Send Message
Posted Jan 31, 2014@Hemebru
Ya! that would be nice!
-
View User Profile
-
Send Message
Posted Jan 29, 2014Is there a possibility of adding hide inventory till successful log in and deny any type of commands as well?
-
View User Profile
-
Send Message
Posted Jan 26, 2014@Hemebru
Thats something im planning for the future.
-
View User Profile
-
Send Message
Posted Jan 25, 2014@lenis0012
Yes I have, but it would be great if you could integrate it with BungeeCord, because this is a PERFECT plugin for hubs! :D
-
View User Profile
-
Send Message
Posted Jan 22, 2014@Hemebru
SImply disable 'session'.
In the config.yml
@Zilacon
Since v 2.0.7, it no longer detects up/downwards moving.
-
View User Profile
-
Send Message
Posted Jan 21, 2014@lenis0012
Could you PLEASE make your plugin place the person on the ground instead of bouncing them up and down over and over and over again making it impossible to type in their password or do anything on the server.
When your plugin keeps trying to "lock their place" in the world it should ignore the Y axis and let the person fall, everytime they get moved to a different Y position it closes the chatbox and makes typing in a password impossible.
In the end the only way past this is to have another staff member teleport them to spawn or something so it stops them from bouncing.
-
View User Profile
-
Send Message
Posted Jan 21, 2014Hello. as soon as i do /register password. or /login password i dc and get protocol error, unexpacted error. http://gyazo.com/582b0e1d30feeecdfea624b8146f612c
help plz? :D
kind regards. janbas
-
View User Profile
-
Send Message
Posted Jan 21, 2014Please add BungeeCord support, because in my HUB, I have players logging off, and their session active, and ip locked but because of bungee, it locks bungees ip so 127.0.0.1, aka the server, so anyone can login in 60 seconds, please add bungee support! Thanks!
-
View User Profile
-
Send Message
Posted Jan 20, 2014and i found a bug... if i set fake-location: true then i connect server and then disconnect server without login.
then when i login again, my location will be the fake location and 100% dead
-
View User Profile
-
Send Message
Posted Jan 20, 2014hello this is a good plugins anyways i have a suggestion. would you add a data - Last Login time, to the database. so i could remove the afk player.
-
View User Profile
-
Send Message
Posted Jan 18, 2014@chrishillz
We curently have BCrypt as default encryption method, this is pretty fast and secure enough for a minecraft server.
Messages/language cant be changed as of this release.
I may add a lang.yml/messages.yml in the future though.
-
View User Profile
-
Send Message
Posted Jan 17, 2014How can I customize the messages of this plugin? I don't see the options on the default configuration file.
Also can you add support for Eliptic-Curve Cryptography? This would be stronger and faster.
-
View User Profile
-
Send Message
Posted Jan 16, 2014How can I change the language?
-
View User Profile
-
Send Message
Posted Jan 14, 2014@chrishillz
You could theoretically use multi server support with MySQL if all the servers connect to the same database. It is also faster.
-
View User Profile
-
Send Message
Posted Jan 14, 2014What's the advantage of using MySQL out of curiosity?
-
View User Profile
-
Send Message
Posted Jan 11, 2014@SwatL3G3ND
LoginSecurity v2.0.7 for 1.7.2 R0.2 was uploaded.
No bungeecord support though.
-
View User Profile
-
Send Message
Posted Jan 9, 2014Update for 1.7.2 and bungee ^^